Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: 1AcuvM1CIJJfcOgVQ0caB+20EUQfpsyF7/S77Ew74qI=
Subject key identifier: 5C:A8:B8:E1:BA:61:9C:C8:CF:99:2C:39:51:05:12:6E:44:50:DE:D5
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 0196BDB75CCE4ACD888A51C3204C20A60A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 02E4
Signing time: Sun 11 May 2025 05:00:32 +0000
Manifest this update: Sun 11 May 2025 05:00:32 +0000
Manifest next update: Mon 12 May 2025 05:00:32 +0000
Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: zdzbOqKjuBU7Jab1gIGmY1ktn4E7vCD+BGgz8R+y9AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:5c:ce:4a:cd:88:8a:51:c3:20:4c:20:a6:0a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: May 11 05:00:32 2025 GMT
Not After : May 12 05:00:32 2025 GMT
Subject: CN=5ca8b8e1ba619cc8cf992c395105126e4450ded5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0a:b5:c9:34:17:ef:f9:74:44:5e:12:b6:bc:
fc:f6:1f:db:31:89:7e:e8:02:a0:e0:f7:84:52:1e:
c1:f2:0f:8a:0c:e7:da:b6:ad:a3:e4:a2:db:af:9d:
ee:b1:ef:50:98:83:67:52:bf:2b:84:bd:ce:e7:26:
06:a1:11:19:cd:c7:4d:40:43:1e:74:35:c2:8a:13:
48:fe:2a:6b:92:07:90:c5:4b:8a:dc:85:c0:55:9f:
c8:ea:1a:7a:5e:85:81:21:7a:dd:af:54:94:5c:7f:
26:25:2e:ba:24:fa:b9:4b:eb:2c:28:ff:90:34:bd:
f5:84:04:ce:05:9c:e6:66:00:ed:70:ac:41:f6:4d:
fc:6a:b9:93:22:5f:64:ad:f6:8e:96:cb:6e:cd:75:
43:8f:1c:e5:f5:86:35:0f:b0:b7:c7:e5:f8:c9:56:
b2:58:54:55:cc:cc:c1:8b:10:7c:97:c0:5e:da:70:
0c:d9:23:57:51:9d:cc:5f:78:d5:0f:03:d0:3d:84:
e2:df:37:48:e7:03:af:0f:e7:76:9e:5f:53:32:19:
3c:b0:22:10:11:e9:10:86:90:39:08:3f:a3:50:71:
e7:35:44:7b:8f:3e:75:b9:e1:de:f9:35:5f:93:59:
f9:25:00:1e:e8:51:f3:6c:17:01:ec:8a:6b:d4:73:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A8:B8:E1:BA:61:9C:C8:CF:99:2C:39:51:05:12:6E:44:50:DE:D5
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:60:13:bb:87:ce:5e:55:19:2a:70:b8:b1:4b:8a:27:e3:a0:
e4:c6:97:0a:1b:8f:5d:a5:8d:bf:e9:ef:1e:ce:0d:13:f1:b2:
92:96:f6:15:cb:51:cc:67:e7:af:c1:51:e2:d0:69:dd:7b:6a:
0b:54:34:d7:e0:aa:55:59:b7:7e:3b:bf:32:5f:9c:0c:23:3b:
1e:51:ff:22:f1:19:42:d7:59:7c:a9:5f:f3:de:ad:55:f8:fc:
b8:36:d2:0d:13:91:ce:01:22:06:7e:83:63:3d:0e:e5:62:e1:
89:37:3b:dc:8d:b1:13:91:ac:ef:4f:f4:c7:08:be:fc:48:01:
82:83:8b:f7:de:5a:61:dc:66:fb:74:a9:dc:e5:d5:2d:34:5c:
64:fb:d0:2b:4a:2e:53:f1:2a:1b:57:f0:8c:d7:2b:00:aa:53:
ac:5e:0b:04:43:e1:7e:72:2d:18:85:49:f0:f9:10:7a:c4:9f:
75:9b:ce:a1:81:d4:a7:32:7a:35:af:0a:0e:65:47:88:87:9d:
f1:49:69:da:09:0d:8e:63:f7:d6:3b:8b:af:6c:e8:b3:4b:d9:
c9:e3:29:f3:b6:8c:87:96:9f:3d:8f:09:f1:16:a0:15:f6:4f:
53:98:6a:93:89:bb:e2:ad:dd:ba:67:b5:51:70:50:40:0b:c5:
e2:1d:35:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:46:25 2025 by rpki-client